Privacy notice

Last updated: 2026-05-27

This privacy notice applies to the services operated under the Xovi and AxoloDAO brands.

1. Data controller

During this initial stage of Xovi, the controller of your personal data is Habacuc Isaías Vera Hernández, an individual conducting business activities, who is responsible for the operation and tax management of payments associated with Xovi.

We want you to clearly know who is responsible for your information and how to contact us. For any matter related to privacy or personal data, you can email us at hola@axolodao.org. We also provide the following contact address: José María Pino Suárez No. 46, Colonia Centro, C.P. 76000, Santiago de Querétaro, Querétaro, Mexico.

If the person or entity responsible for Xovi changes in the future, we will update this privacy notice on this same page. When required by law, we will also request your consent.

2. Personal data we process

Payment and billing (Stripe): name, email address, billing address, RFC when necessary for CFDI, and the last 4 digits of the card. Full card data does not pass through our servers; it is processed directly by Stripe under its own security and compliance standards.
On-chain identity (SIWE): wallet address, which is public by definition, and authenticated session. We do not link your wallet to an email address, RFC, or legal identity, except when necessary to operate the service, process payments, issue tax receipts, respond to requests, or when you provide that data when paying or participating in the platform.
Technical telemetry: IP address, user-agent, and basic technical events to prevent fraud, detect abuse, debug errors, and maintain the security of the service.
Cookies, sessions, and similar technologies: we may use technical cookies, local storage, or similar technologies necessary to maintain your session, authenticate your wallet, prevent fraud, operate the site, and debug errors. If in the future we use non-essential analytics, advertising, or third-party cookies, we will inform you and, when applicable, request your consent.
Submitted clips: video clip, timestamp range of the live stream, and the wallet from which the clip was submitted.

3. Important: irreversibility of on-chain operations

Contributions or on-chain payments made in ETH, USDC, or other digital assets to addresses associated with AxoloDAO, including treasury.axolodao.eth, are irreversible once confirmed on the corresponding network. Before confirming a transaction, carefully verify the network, token, amount, and destination address.

Your wallet address is public on the blockchain and may be visible to third parties. AxoloDAO cannot delete, modify, or reverse public records confirmed on blockchain networks.

4. Purposes of processing

We process your personal data for the following purposes necessary to provide the service:

Process payments, subscriptions, and contributions.
Issue tax receipts when applicable.
Authenticate your session and link your participation to your wallet.
Register clips, validations, and other forms of participation within the platform.
Operate, maintain, and provide technical support for the platform.
Prevent fraud, abuse, spam, or misuse of the service.
Respond to requests, clarifications, or communications related to your account or participation.
Send operational communications, such as receipts, service notices, or relevant changes.
Maintain technical, tax, accounting, and security records.

We may also process your data for the following optional purposes:

Send you non-essential communications about updates, activities, or news related to the project.
Invite you to surveys, community dynamics, or activities related to AxoloDAO.
Analyze user participation in aggregate form to improve the product, without individual profiling.

You may object to the processing of your data for optional purposes by emailing hola@axolodao.org.

5. Processors and providers

Stripe Payments Mexico — payment processing and CFDI management when applicable.
Vercel — website hosting and operational records.
Neon — relational database for storing sessions, subscriptions, and clips.
YouTube (Google) — live stream hosting.

6. Data retention

We will retain your personal data only for the time necessary to fulfill the purposes described in this notice and the applicable tax, accounting, contractual, or legal obligations. In Mexico, accounting and tax documentation may require retention for a general period of 5 years under the Mexican Federal Tax Code.

SIWE sessions will be retained for a limited operational period. Submitted clips and participation records will be retained as long as necessary to validate contributions, maintain traceability, document the project, improve the system, or comply with legal obligations.

When technically and legally possible, you may request the deletion of your data. On-chain records, such as transactions, attestations, hashes, or public wallet addresses, cannot be deleted or modified by AxoloDAO once confirmed on a blockchain network.

7. ARCO rights and withdrawal of consent

You may request access, rectification, cancellation, or opposition to the processing of your personal data, as well as withdraw your consent when applicable, by emailing hola@axolodao.org.

Your request must include: full name, means to receive a response, the right you wish to exercise, a clear description of the personal data related to your request, and, when applicable, a document proving your identity or legal representation.

We will communicate the adopted determination within a maximum period of 20 business days from the receipt of the request. If the request is granted, it will be made effective within 15 business days following the date on which the response is communicated, in accordance with applicable law.

8. Limitation of use and disclosure

You may request the limitation of the use or disclosure of your personal data, withdraw your consent for non-necessary purposes, or ask to stop receiving non-essential communications by emailing hola@axolodao.org.

9. National and international transfers

To operate Xovi, some processors and providers, such as Stripe, Vercel, Neon, or Google, may process personal data inside or outside Mexico, solely to fulfill the purposes described in this notice.

When the processing constitutes a national or international transfer of data to third parties, it will be carried out in accordance with applicable law, for the maintenance, fulfillment, or operation of the legal relationship between you and the controller, or when necessary to process payments, operate the platform, provide the service, comply with legal obligations, or respond to requests related to your participation.

10. Changes to this privacy notice

Any modification to this notice will be published on this same page. When the change is material or requires consent under applicable law, we will notify you through the available contact channels or through a visible notice on the site.